topic Re: enable rbac sdcli dfm_config in Active IQ Unified Manager Discussions

enable rbac sdcli dfm_config

daehnrich_bsh — Thu, 05 Jun 2025 06:56:31 GMT

Hello,

i try to enable rbac with my dfm/snapdrive. Since it is impossible to copy paste here anything. i added a file with the Problem.

The User is added on DFM Server with GlobalFullControl.

What i make wrong? I my eventlogs i found no additional Infos.

thanks

Re: enable rbac sdcli dfm_config

arjunan — Wed, 20 Apr 2011 21:12:01 GMT

hi,

following are the steps to configure,

- SDW needs to be installed with the DFM server settings like DFM server name/ IP Address, User name, PWD. ( The Username should at the least have DFM.Core.AccessCheck in the global scope on the DFM )

are you sure you have given the user name with the DFM.Core.AccessCheck permission.

then try to set SDW with the information.

thanks, Prabu

Re: enable rbac sdcli dfm_config

daehnrich_bsh — Thu, 21 Apr 2011 07:59:15 GMT

Hi,

the User has DFMGlobal Full Control.

EU.BSHG.COM\MCH-sds_tdfm

GlobalFullCo...

regards Soeren

Re: enable rbac sdcli dfm_config

kjag — Thu, 21 Apr 2011 09:05:45 GMT

Hi,

Is the hostname (mchwtdfm01 ) of DFM is pingable from the SDW machine?

-KJag

Re: enable rbac sdcli dfm_config

daehnrich_bsh — Thu, 21 Apr 2011 09:07:43 GMT

Its on the same System, and i tried also with IP. And yes its pingable.

Re: enable rbac sdcli dfm_config

prasads — Thu, 21 Apr 2011 09:51:13 GMT

DFM Zapi failed to connect to the DFM server 'mchwtdfm01'.

To me this means that the user who is running the SDW service is not able to connect to the DFM server.

Can you please check the below points on the DFM server

Make sure DFM server is running & using port no. 8088

(Run the below commands & check

dfm service list

dfm option list serverHTTPPort)

Re: enable rbac sdcli dfm_config

daehnrich_bsh — Thu, 21 Apr 2011 10:19:54 GMT

well, all services running and http port is 8088

Re: enable rbac sdcli dfm_config

arjunan — Thu, 21 Apr 2011 12:57:09 GMT

if DFM is windows machine,

make sure you have created a same user under Local Users and Groups in windows.

creating a user in DFM doesnt create a user in windows,

also you can use the following command.

sdcli dfm_config set -host mchwtdfm01 -user MCH-sds_tdfm -pwd XXXXX

no need to give domain name too. try this hope it works.

thanks, Prabu

Re: enable rbac sdcli dfm_config

daehnrich_bsh — Thu, 21 Apr 2011 12:59:50 GMT

DOH! i forget this Point, i will do it after Eastern and try again and give then full pts. Thanks for the hint.

Re: enable rbac sdcli dfm_config

daehnrich_bsh — Tue, 26 Apr 2011 08:18:48 GMT

DFM authenticates users based on the operating system it is installed on and expects an existing user in the environment.

Solution

Windows environment:
Specify a user local to the Windows Server, a Domain user or group.

Anyway, i createt a user local on the System and put him direct to the Administrators. dfm user add username

But i still get the error.

Re: enable rbac sdcli dfm_config

arjunan — Tue, 26 Apr 2011 09:35:25 GMT

you mean still you are facing the issue ????

Re: enable rbac sdcli dfm_config

daehnrich_bsh — Wed, 27 Apr 2011 07:04:17 GMT

yes.

Creating ConfigManagement web service client...

A FaultException<SDResult> occurred:

DFM Zapi failed to connect to the DFM server 'mchwtdfm01'.

The operation completed successfully.

Re: enable rbac sdcli dfm_config

sswain123 — Tue, 17 Apr 2012 14:27:09 GMT

I just encountered the exact same error when running the command: "sdcli dfm_config set -host <dfm_server> -user <domain>\<user_name>"...

A FaultException<SDResult> occurred:

DFM Zapi failed to connect to the DFM server '<dfm_server>'.

The operation completed successfully.

I tried adding my user acct to the local admin group on the Windows server, my user also has GlobalFullControl to the DFM server... didn't seem to work. So, I re-read this thread and removed the Domain name from the cmd as suggested by Prabu and it worked.